14 Oct
2008
14 Oct
'08
6:23 a.m.
Balaji wrote:
- Can any one help me or guide me to
- Enable the selinux
setenforce 1
Use "getenforce" to determine the current status of selinux. Look in /etc/selinux/config for details of policy being used - e.g. targeted.
- Selinux Customize my own policy
man setsebool man getsebool
These will help you modify options in the supplied policies. For example, use "getsebool -a | grep http" to list all selinux options and filter the list for those pertaining to http. You can of course create your own policy and local customisations based on audit logs etc, but I've not ventured down this path myself. Others on the list will be able to assist if you need to go that way.
Hope that gets you started :)
Cheers,
Ian